STIGQter STIGQter: STIG Summary: VMware vRealize Automation 7.x tc Server Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 28 Sep 2018:

tc Server ALL must initiate logging during service start-up.

DISA Rule

SV-100575r1_rule

Vulnerability Number

V-89925

Group Title

SRG-APP-000092-WSR-000055

Rule Version

VRAU-TC-000125

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Navigate to and open Navigate to and open /usr/share/tomcat/bin/catalina.sh.

Navigate to and locate the start block : "elif [ "$1" = "start" ] ; then"

Navigate to and locate both "eval" statements : "org.apache.catalina.startup.Bootstrap "$@" start \"

Add this statement immediately below both of the "eval" statements : '>> "$CATALINA_OUT" 2>&1 "&"'

Check Contents

At the command prompt, execute the following command:

more /usr/share/tomcat/bin/catalina.sh

Type /touch "$CATALINA_OUT"

Verify that the start command contains the command ">> "$CATALINA_OUT" 2>&1 "&""

If the command is not correct or is missing, this is a finding.

Note: Use the "Enter" key to scroll down after typing /touch "$CATALINA_OUT"

Vulnerability Number

V-89925

Documentable

False

Rule Version

VRAU-TC-000125

Severity Override Guidance

At the command prompt, execute the following command:

more /usr/share/tomcat/bin/catalina.sh

Type /touch "$CATALINA_OUT"

Verify that the start command contains the command ">> "$CATALINA_OUT" 2>&1 "&""

If the command is not correct or is missing, this is a finding.

Note: Use the "Enter" key to scroll down after typing /touch "$CATALINA_OUT"

Check Content Reference

M

Target Key

3439

Comments